@forgezero/agent 0.1.9 → 0.1.10

package/dist/index.d.ts

@@ -25,7 +25,7 @@ import type { SecretCache } from './cache';
  * That preference was implemented in the client long before anything listened.
  * See `socket.ts` for why it signs rather than handing back a token.
  */
-export declare const VERSION = "0.1.9";
+export declare const VERSION = "0.1.10";
 export { startAgent, handleRequest } from './socket';
 export type { AgentOptions, AttestationSource, Request, Response } from './socket';
 export { createSecretCache, CacheError } from './cache';

package/package.json

@@ -1,11 +1,11 @@
 {
 	"//": "Publishing happens from an operator's machine, not CI \u2014 CLAUDE.md records that the absence of CI is deliberate. npm's `provenance` attests a tarball was built by a recognised CI provider from a named commit, so it cannot be produced here: it was set, and the first publish failed with `Automatic provenance generation not supported for provider: null`. A setting that can never be satisfied is worse than none, because it reads as a guarantee nobody is getting. Restore it the day this publishes from CI, and not before.",
 	"name": "@forgezero/agent",
-	"version": "0.1.9",
+	"version": "0.1.10",
 	"type": "module",
 	"scripts": {
 		"check": "tsc --noEmit",
-		"build": "bun build src/index.ts --outfile dist/fz-agent.js --target bun --format esm --packages external && bun build src/compute.ts src/provision.ts src/subscribe.ts src/pipeline.ts src/definition.ts src/ssh-server.ts src/ssh-listen.ts src/provisioning-pull.ts src/guest-enrolment.ts src/node-vault.ts src/metal-provision.ts src/metal-helper-socket.ts src/deployment-runner.ts --root src --outdir dist --target browser --format esm --packages external && tsc --emitDeclarationOnly --declaration --noEmit false --outDir dist",
+		"build": "bun build src/index.ts --outfile dist/fz-agent.js --target bun --format esm --packages external && bun build src/cli/index.ts --outfile dist/fz.js --target bun --format esm --packages external && bun build src/compute.ts src/provision.ts src/subscribe.ts src/pipeline.ts src/definition.ts src/ssh-server.ts src/ssh-listen.ts src/provisioning-pull.ts src/guest-enrolment.ts src/node-vault.ts src/metal-provision.ts src/metal-helper-socket.ts src/deployment-runner.ts --root src --outdir dist --target browser --format esm --packages external && tsc --emitDeclarationOnly --declaration --noEmit false --outDir dist",
 		"prepublishOnly": "bun run check && bun run build"
 	},
 	"devDependencies": {
@@ -16,6 +16,7 @@
 		"@noble/post-quantum": "^0.6.1"
 	},
 	"dependencies": {
+		"@forgezero/access": "^0.1.0",
 		"@forgezero/runtime": "^0.1.2",
 		"@forgezero/vault": "^0.1.1",
 		"@noble/curves": "^2.2.0",
@@ -24,7 +25,8 @@
 		"@scure/bip39": "^2.2.0"
 	},
 	"bin": {
-		"fz-agent": "./dist/fz-agent.js"
+		"fz-agent": "./dist/fz-agent.js",
+		"fz": "./dist/fz.js"
 	},
 	"publishConfig": {
 		"access": "public"
@@ -35,7 +37,7 @@
 		"LICENSE"
 	],
 	"license": "MIT",
-	"description": "The ForgeZero node agent \u2014 holds a project-scoped vault replica in RAM and serves it over a unix socket, so applications hold no credential.",
+	"description": "ForgeZero machine tooling: the fz operator command and fz-agent for vault access, provisioning and deployment.",
 	"keywords": [
 		"agent",
 		"forgezero",
@@ -48,10 +50,10 @@
 	"homepage": "https://www.forgezero.net/docs/agent",
 	"repository": {
 		"type": "git",
-		"url": "git+https://github.com/axxra/forgezero.git",
+		"url": "git+https://github.com/forgezero-net/packages.git",
 		"directory": "packages/agent"
 	},
-	"bugs": "https://github.com/axxra/forgezero/issues",
+	"bugs": "https://github.com/forgezero-net/packages/issues",
 	"exports": {
 		"./provision": {
 			"types": "./dist/provision.d.ts",